McAfee Email Gateway

Transcription

Release NotesMcAfee Email Gateway version 6.7.2, Hotfix 5This document provides information about McAfee Email Gateway version 6.7.2, Hotfix 5, includingdownload and installation instructions. You can find additional information at the following locations: Help – Help is built into Email Gateway. Click the Help icon in the upper right corner of the window. Support – Visit mysupport.mcafee.com to find product documentation, announcements, andsupport.In this document .About this releaseEnhancementsResolved issuesKnown issuesInstallationAbout this releaseEmail Gateway version 6.7.2, Hotfix 5 is compatible with McAfee Email Gateway appliances at version6.7.2 with Hotfix 4 installed.McAfee Email Gateway 6.7.2 Hotfix 5 Release Notes1

EnhancementsEnhancementsThe following enhancements are included.Licensing (Bugzilla reference 626710)The licensing process for your appliance has been enhanced. The license key will be retrieved andapplied automatically based on the kind of appliance you select from the drop-down list on the LicenseManager window. This is an evaluation license, which means that some features will be deactivatedafter 30 days. You must download a regular license before that time if you want to keep all featuresenabled.Be certain you select the proper license for the kind of appliance you are using. If licensing fails, go tohttp://mysupport.mcafee.com for assistance.Clustering (Bugzilla reference 626315)Clustering was non-functional on 6.7.2 with Hotfix 4 installed. Clustering failed when the challengeresponse feature was enabled. The User Lists on the Secure Web Delivery (SWD) appliances failed tobuild. After you install Hotfix 5, you can correct this issue by removing the existing clusters andcreating new ones.Resolved issuesThis release resolves the following issues.Table 1 Issues resolved in Email Gateway 6.7.2 Hotfix 52ReferenceNumberDescription12689The user interface locks up when adding a new group in the Group Manager Definition if thereare already 10,000 entries.15543While the user attempts to load a standard whitelist, an error message displays.16266When the user generates reports, Email Gateway encounters layout and value errors inreports.log.16764Deleted message still appears in the user interface.18877WebAdmin times out incorrectly when it displays the Queue Manager Queue Informationwindow.18995A null value encoding in comma separated value (CSV) files interferes with parsing.19300An IP address is whitelisted for TrustedSource .19303Dictionaries will not scan messages with the EUC-KR character set.19323After the user performs a Central Management Console (CMC) push, “Sched” restarts. This resetsthe cleanup time for the specified cleanup interval, delaying intended cleanup.19662SMTPO fails to attempt any delivery after discovering invalid non-primary MX record IP address.20024Email Gateway does not properly detect URLs if they are followed by certain unprintablecharacters.20045Report generation typeface errors occur with Chinese, Japanese, and Korean locales.20054Scheduled message archiving fails when it tries to archive records that have been deleted.20126Attempted to sendreport trend data file to Central Management Console (CMC) via SCP fails andgenerates an error.20347When the user selects an individual message to print, the pop-up window shows HTML textinstead of message body to be printed.20654In dual Centralized Quarantine Server (CQS) configuration, Attachment Filtering sends twocopies of the quarantined message to the secondary CQS, and none to the primary CQS.20905The Email Gateway generates a notification for an action regardless of action priority.McAfee Email Gateway 6.7.2 Hotfix 5 Release Notes

Resolved issuesTable 1 Issues resolved in Email Gateway 6.7.2 Hotfix 5 (continued)ReferenceNumberDescription21247The Email Gateway encounters unreliable UDHA behavior.21296The network errors graph falsely displays a high number of errors.21593The system fails to create PDF reports, showing an exception in the logs.627652Duplicate of 21593.21599Messages quarantined to multiple queues cannot be released.21624Reports fail to finish, without error, during generation of the Domain Executive Summary.21697Data corruption in event logs produces a parsing error.21701User interface response time is unusually long.21811HTML message stamp is corrupted by the Email Gateway.22086Content Filtering regular expression validates space as an ASCII value, triggering false positives.22097Desktop Encryption Analysis does not perform the prescribed action.22155When the user applies an EUQ whitelist rule globally, the Email Gateway creates an additionalglobal rule with only that rule enabled (disables all other whitelist rules).22156The exclude list doesn’t work for anomaly detection for LDAP verification.22160When the user selects random lengthy intervals for the Consolidated Executive Report, somereports cannot be saved.22240EUQ notification does not occur precisely at the scheduled time, and can be up to an hour late.22257EUQ retrieval page is missing the display for the particular queue where a message wasquarantined.22427Notifications for password protected messages are not generated.22449Regardless of what files are manually selected for transfer using FTP, nothing is transferred ifsyslog is enabled.22815The Content Extraction portion of SuperQueue is unable to process POTX files.23122When the user attempts to view message details for a dropped message, the pop-up returns amessage that no details were found.23270Message splitting and whitelisting are not working correctly.23363Messages being processed hang in SuperQueue, in either Join Queue or Rip Queue sub-queues.628451Duplicate of 23363.23385A message sent with an attached .dwg file fails content extraction.23407Central Management Console (CMC) is unable to push policies that include customized reportscorrectly. The reports are not generated.23412The Top Virus Signature Report shows a count that exceeds the specified date range.23437Inbound messages are not following the defined alternate MX rules for inbound hosted domains.23537An Image Analysis rule triggers action before the configured threshold is reached.23539Manual FTP transfer of logs and scheduled FTP transfer of binary logs do not work properly.23751The anti-virus queue quarantines uncontaminated XLS files.23803Default Executive Summary graph displays a time interval of zero seconds.546495Duplicate of 23803.554758Duplicate of 546495 (23803).568923Duplicate of 546495 (23803).584316Duplicate of 546495 (23803).613325Duplicate of 23803.616297Duplicate of 23803.626311Duplicate of 23803.630944Duplicate of 23803.632755Duplicate of 546495 (23803).639657Duplicate of 23803.McAfee Email Gateway 6.7.2 Hotfix 5 Release Notes3

Resolved issuesTable 1 Issues resolved in Email Gateway 6.7.2 Hotfix 5 ate of 23803.23866Authentium Anti-Virus generates sweep errors on non-malicious, basic files.23899An .xlsx files cause SuperQueue to perform a core dump.622419Duplicate of 23899.541351The Client Officer account type is missing from the New Account window.545846The MAC address is not correct in the command line interface when restoring a backup to adifferent appliance.547881When a message uses the iso8859-1 character set and Message Stamping is performed the partis converted to UTF-8 and stamped.549346SuperQueue performs a core dump when it encounters attached .doc files.549418Duplicate of 549346.550911Central Management Console (CMC) Queue Search for processed messages does not identify theappliance that processed the message.551812Printing from SWD results in inconsistent behavior between browsers.553290Message detail for dropped messages is unavailable.553599The Secure Delivery portlet causes the Dashboard window to fail.560533Duplicate of 553599.629311Duplicate of 553599.553878The command line interface does not communicate properly.553929Rebuilding of messages in Join Queue fails for messages that contain a binary .mht attachment.556172The anti-virus engine fails to capture known virus files.559168Email Gateway drops the first part of messages received from LISTSERV when message stampingis enabled.559435Secure Web Delivery does not show the message subject in notifications.560449Users of standalone Secure Web Delivery (SWD) appliances cannot import user list files.561785SuperQueue fails to process heavily compressed .zip files.563072When users create new user(s) by uploading user list files under User List in User Administration,they encounter a system error.563202PPTX files cause SuperQueue to perform a core dump.563739Messages with .xlsx attachments hang in SuperQueue.564120.xlsx files cause SuperQueue to perform a core dump.564319Messages with .snp files cause SuperQueue to perform a core dump.569121Duplicate of 564319.574286Duplicate of 564319.564660When the user attempts to access the link for an expired message, the error page shows McAfeebranding.564922Authentium is still running on old engine, version 5.1.1.565414Grep command arguments do not work after installation of Email Gateway 6.7.2 HF2.568078Duplicate of 565414.590450Duplicate of 565414.565462When a virtual host user attempts to log on to the Advanced Encryption User Management User List window, the Email Gateway generates an error message.567233Executive Summary and Spam Summary reports show no information.567241Email Gateway quarantines messages with specific XLXS attachments to the Failures Queue.568645Messages with a Microsoft Word document attached cause backup in SuperQueue.570141TrustedSource SDK in Email Gateway fails, with invalid header and body in the email message.570189Message attachments are not sent with messages by SWD.McAfee Email Gateway 6.7.2 Hotfix 5 Release Notes

Resolved issuesTable 1 Issues resolved in Email Gateway 6.7.2 Hotfix 5 te of 570189.572929Users must log on twice to gain access to the command line interface.582158Duplicate of 572929.582974Duplicate of 572929.614581Duplicate of 572929.573262The user is unable to modify user preferences to add a size column (for processed messages).573514Email Gateway cannot process .zip file with .jpg files inside.575822Messages with zipped .xls, .pdf, and .snp files cause SuperQueue to perform a core dump.576077SuperQueue fails to process Word 2003 message attachments with Chinese or Russiancharacters.576478PPT files cause SuperQueue to perform a core dump.578714Messages with .snp files cause SuperQueue to perform a core dump.579932The system utilization chart on the Dashboard displays incorrect information.584014Messages with .snp files cause SuperQueue to perform a core dump.584721.xlsx files cause SuperQueue to perform a core dump.585251Command line interface sshd cli.log file permissions cause logon to fail.589142Duplicate of 585251.616206Duplicate of 585251.621182Duplicate of 585251.625666Duplicate of 585251.625670Duplicate of 585251.633481Duplicate of 585251.634845Duplicate of 585251.635193Duplicate of 585251.585254.xlsx files cause SuperQueue to perform a core dump.586602When SWD fails to deliver a message notification, the Email Gateway generates a messagestating that no delivery status notification (DSN) will be generated.587293In EUQ notification, the tags inserted in the Subject field are not being resolved.588837Users receive Secure Web Mail (SWD) notifications with blank subject fields or with subject tagsin that field.589078SuperQueue fails to process messages, resulting in delays in mail delivery.589375Email Gateway quarantines messages with specific XLXS attachment to the Failures Queue.589570Quick Snapshot graphs for both anti-spam and anti-virus display data for an improper daterange, despite availability of data.589871Navigation on the address masquerade list does not work.591773A message sent with the attached .dwg file fails content extraction.592092DKIM fails to sign messages when Message Stamping is enabled.592313Messages with .pdf file attachments cause SuperQueue to perform a core dump.593739The Content Analysis dictionary fails to detect regular expressions.594025Messages with .zip files containing an Apple Keynote files cause SuperQueue to perform a coredump.594282When the appliance date is set on the same day as license expiration, the Days to Expire columnshows no information on the License Manager window.610887Email Gateway fails to recognize .dwg file extensions.612101When an SWD user conducts a message search under the Encryption tab, the tab converts to theQueue Manager tab.613303SMTPProxy does not properly accept configuration changes.McAfee Email Gateway 6.7.2 Hotfix 5 Release Notes5

Resolved issuesTable 1 Issues resolved in Email Gateway 6.7.2 Hotfix 5 (continued)6ReferenceNumberDescription615040The presence of SmartStart software and other updates pages makes setting up the appliancemore complicated.615306Messages with .snp files cause SuperQueue to perform a core dump616563Specific email messages cause SuperQueue to perform a core dump.617014The remote Apache Tomcat mishandles invalid values for the Transfer-Encoding HTTP header assent by a client, creating a vulnerability.617239The command line interface requires two logon attempts before authenticating.619962Use of outdated Authentium AV engine causes false positives.620048Adding the ability to upload entries from a file for SSL/TLS domains (Require/Deny functionality).620062Messages with .pdf file attachments cause SuperQueue to perform a core dump.620280A Content Extraction issue causes SuperQueue to back up.620721The copy message action does not retain the original recipient address, causing notifications tofail.620742The current version of Tomcat in Email Gateway 6.7.2 HF4 is vulnerable to attack.627116Duplicate of 620742.631618Duplicate of 620742.631955Duplicate of 620742.633832Duplicate of 620742.621029Messages with .pdf file attachments cause SuperQueue to perform a core dump

McAfee Email Gateway 6.7.2 Hotfix 5 Release Notes 1 This document provides information about McAfee Email Gateway version 6.7.2, Hotfix 5, including download and installation instructions. You can find additional information at the following locations: Help – Help is built into Email Gateway. Click the Help icon in the upper right corner of the window. Support – Visit mysupport .